$ rpki-client -vvvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft File: CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft (raw, json) Hash identifier: 0DhWZbaYJsRjYVkJRJiNy8rLa49SSq59PZPWf3sMLP8= Subject key identifier: A2:81:95:D6:0B:16:14:DC:EF:64:46:3F:91:34:53:1A:41:99:E2:06 Authority key identifier: CA:77:E7:2C:F3:C2:DA:1D:E0:8E:65:35:67:18:B3:E4:9E:80:38:E5 Certificate issuer: /CN=CA77E72CF3C2DA1DE08E65356718B3E49E8038E5 Certificate serial: 04CDBCDE5851FD8C5F1BD7B13ED9F7B8A8D95BA0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft Manifest number: 0479 Signing time: Sun 01 Nov 2026 10:01:23 +0000 Manifest this update: Sun 01 Nov 2026 09:56:23 +0000 Manifest next update: Mon 02 Nov 2026 10:55:23 +0000 Files and hashes: 1: 3137392e34382e3230382e302f32322d3234203d3e20323731303939.roa (hash: zymP4Cr/TldoxcRtIWXy2pyqePU7aajWZDVuHzjcXW4=) 2: CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl (hash: 6vt3f5f6Jta7nTohIf2ay11QMUiJ7Ys9M6/cmXNud0k=) 3: 323830343a373634303a3a2f33322d3332203d3e20323731303939.roa (hash: TtdUKWZdSZxcwbJefVAQQL+NId4DY6OluLwxft8M2rg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 02 Nov 2026 10:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cd:bc:de:58:51:fd:8c:5f:1b:d7:b1:3e:d9:f7:b8:a8:d9:5b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA77E72CF3C2DA1DE08E65356718B3E49E8038E5 Validity Not Before: Nov 1 09:56:23 2026 GMT Not After : Nov 2 10:55:23 2026 GMT Subject: CN=A28195D60B1614DCEF64463F9134531A4199E206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:3a:dd:63:64:77:f5:5b:2c:e2:81:b4:53: 4a:24:99:29:93:94:9b:a0:f0:81:a4:3b:1c:07:19: 2a:99:9b:c8:69:d4:ff:b8:fd:9a:f6:17:a7:11:47: 7a:3e:0e:5f:6a:fa:ef:a8:98:55:15:20:6c:cc:db: 19:c3:38:fd:e0:1c:62:46:0a:e4:c5:ab:08:0e:5b: 61:b7:fa:b7:f8:ec:23:a5:b7:70:9b:e6:ff:c9:06: 57:12:ef:df:b7:47:9f:79:1a:09:0b:b0:8c:7c:a6: ab:57:d2:3b:1b:f2:88:d5:d9:12:ac:0c:a7:8a:84: 9c:b4:34:3f:d0:d8:14:c5:22:f3:93:d9:e6:ea:df: 21:87:29:98:0e:9e:c4:10:c1:72:5e:72:ac:36:3d: 39:dc:73:20:ee:3f:bc:d6:0d:2b:ce:6a:1c:d9:d5: a3:f1:44:c4:53:0e:34:30:38:40:1b:46:f5:5c:4c: 75:af:31:cd:00:6c:66:4d:38:64:d1:dc:fc:56:c6: 52:4e:bc:64:4c:df:c8:df:df:1b:71:74:64:35:4e: ed:a3:88:a5:49:a4:16:28:12:91:0f:b2:82:66:0d: 46:32:66:78:17:a7:52:90:05:ca:39:79:84:63:72: 2b:61:d6:48:31:d6:3c:0f:cf:0c:da:57:19:45:da: ea:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:81:95:D6:0B:16:14:DC:EF:64:46:3F:91:34:53:1A:41:99:E2:06 X509v3 Authority Key Identifier: keyid:CA:77:E7:2C:F3:C2:DA:1D:E0:8E:65:35:67:18:B3:E4:9E:80:38:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/CA77E72CF3C2DA1DE08E65356718B3E49E8038E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a5:6d:44:5a:48:93:58:ff:88:0d:d4:44:e7:06:3a:0b:f5: 67:57:df:f7:78:a6:33:08:ca:91:45:be:59:59:57:40:d0:d1: e9:13:90:4b:f8:65:78:51:cc:bf:97:ba:55:51:14:6b:25:f3: 1f:11:96:fa:ce:52:db:88:08:04:2a:d8:85:45:f3:a7:d1:ed: 31:f3:b3:4b:0b:6f:50:5e:83:81:40:9b:49:73:4b:92:f3:d7: 02:25:db:06:f7:ba:ee:91:6d:c9:e1:91:75:74:8f:82:03:56: 87:85:8a:a6:1b:a4:71:9a:c8:08:6a:cc:7e:fb:50:9d:79:20: d8:d8:78:ea:3d:bc:a0:1b:9b:e5:c9:d2:3d:1c:9e:0d:4e:08: a5:3d:56:1e:61:b8:e2:69:8b:be:a0:c0:a0:4e:0a:65:6c:e8: c7:b7:4d:61:9c:50:f3:d8:ee:52:e6:92:95:68:8e:3b:7e:7b: 52:db:1d:ee:58:94:c1:7f:98:06:e0:55:0e:0e:45:8a:49:3f: dd:53:c5:14:a3:6c:68:2c:89:9a:21:29:9a:d9:a4:73:7f:c6: ec:9e:b3:7c:f8:ca:30:80:e7:4d:cb:4c:da:23:07:ee:a9:1e: 3d:f5:96:09:e2:8f:52:76:5c:a1:c6:7a:3d:6f:fd:2a:b2:a3: ba:66:0c:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBM283lhR/YxfG9exPtn3uKjZW6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E3N0U3MkNGM0MyREExREUwOEU2NTM1NjcxOEIzRTQ5 RTgwMzhFNTAeFw0yNjExMDEwOTU2MjNaFw0yNjExMDIxMDU1MjNaMDMxMTAvBgNV BAMTKEEyODE5NUQ2MEIxNjE0RENFRjY0NDYzRjkxMzQ1MzFBNDE5OUUyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRDrdY2R39Vss4oG0U0okmSmT lJug8IGkOxwHGSqZm8hp1P+4/Zr2F6cRR3o+Dl9q+u+omFUVIGzM2xnDOP3gHGJG CuTFqwgOW2G3+rf47COlt3Cb5v/JBlcS79+3R595GgkLsIx8pqtX0jsb8ojV2RKs DKeKhJy0ND/Q2BTFIvOT2ebq3yGHKZgOnsQQwXJecqw2PTnccyDuP7zWDSvOahzZ 1aPxRMRTDjQwOEAbRvVcTHWvMc0AbGZNOGTR3PxWxlJOvGRM38jf3xtxdGQ1Tu2j iKVJpBYoEpEPsoJmDUYyZngXp1KQBco5eYRjcith1kgx1jwPzwzaVxlF2urzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUooGV1gsWFNzvZEY/kTRTGkGZ4gYwHwYDVR0j BBgwFoAUynfnLPPC2h3gjmU1Zxiz5J6AOOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWV6VlI3WGpFTUJTQU1wdFlhOXBxOGl6UURaMXh4dUtzc1RFOGk0blVk Qm4vMC9DQTc3RTcyQ0YzQzJEQTFERTA4RTY1MzU2NzE4QjNFNDlFODAzOEU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNzdFNzJDRjNDMkRBMURF MDhFNjUzNTY3MThCM0U0OUU4MDM4RTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWV6VlI3WGpFTUJTQU1wdFlhOXBxOGl6UURaMXh4dUtzc1RFOGk0blVkQm4vMC9D QTc3RTcyQ0YzQzJEQTFERTA4RTY1MzU2NzE4QjNFNDlFODAzOEU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm6VtRFpIk1j/iA3UROcGOgv1Z1ff93imMwjKkUW+WVlXQNDR6ROQS/hleFHM v5e6VVEUayXzHxGW+s5S24gIBCrYhUXzp9HtMfOzSwtvUF6DgUCbSXNLkvPXAiXb Bve67pFtyeGRdXSPggNWh4WKphukcZrICGrMfvtQnXkg2Nh46j28oBub5cnSPRye DU4IpT1WHmG44mmLvqDAoE4KZWzox7dNYZxQ89juUuaSlWiOO357Utsd7liUwX+Y BuBVDg5Fikk/3VPFFKNsaCyJmiEpmtmkc3/G7J6zfPjKMIDnTctM2iMH7qkePfWW CeKPUnZcocZ6PW/9KrKjumYMHQ== -----END CERTIFICATE-----Generated at Sun Nov 1 13:24:08 2026 by rpki-client